Re: [PATCH V5 0/5] audit by executable name

2014-10-29 Thread Richard Guy Briggs
On 14/10/21, Paul Moore wrote: > On Tuesday, October 21, 2014 06:19:52 PM Eric Paris wrote: > > On Tue, 2014-10-21 at 17:56 -0400, Paul Moore wrote: > > > * Change the audit_status.version field comment in > > > include/uapi/linux/audit.h to "/* audit functionality bitmap */", or > > > similar. We

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Paul Moore
On Tuesday, October 21, 2014 06:19:52 PM Eric Paris wrote: > On Tue, 2014-10-21 at 17:56 -0400, Paul Moore wrote: > > * Change the audit_status.version field comment in > > include/uapi/linux/audit.h to "/* audit functionality bitmap */", or > > similar. We can't really change the structure now, b

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Eric Paris
On Tue, 2014-10-21 at 17:56 -0400, Paul Moore wrote: > * Change the audit_status.version field comment in include/uapi/linux/audit.h > to "/* audit functionality bitmap */", or similar. We can't really change > the > structure now, but the comment is fair game. Trying to think how to do thing

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Steve Grubb
On Tuesday, October 21, 2014 05:56:36 PM Paul Moore wrote: > On Monday, October 20, 2014 07:33:39 PM Steve Grubb wrote: > > On Monday, October 20, 2014 07:02:33 PM Paul Moore wrote: > > > On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: > > > > On Mon, 2014-10-20 at 16:25 -0400, Steve Grub

Re: [PATCH V5 0/5] audit by executable name

2014-10-21 Thread Paul Moore
On Monday, October 20, 2014 07:33:39 PM Steve Grubb wrote: > On Monday, October 20, 2014 07:02:33 PM Paul Moore wrote: > > On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: > > > On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: > > > > On Thursday, October 02, 2014 11:06:51 PM Richard

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Steve Grubb
On Monday, October 20, 2014 07:33:39 PM Steve Grubb wrote: > On Monday, October 20, 2014 07:02:33 PM Paul Moore wrote: > > On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: > > > On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: > > > > On Thursday, October 02, 2014 11:06:51 PM Richard

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Steve Grubb
On Monday, October 20, 2014 07:02:33 PM Paul Moore wrote: > On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: > > On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: > > > On Thursday, October 02, 2014 11:06:51 PM Richard Guy Briggs wrote: > > > > This is a part of Peter Moody, my and Eri

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Paul Moore
On Monday, October 20, 2014 06:47:27 PM Eric Paris wrote: > On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: > > On Thursday, October 02, 2014 11:06:51 PM Richard Guy Briggs wrote: > > > This is a part of Peter Moody, my and Eric Paris' work to implement > > > audit by executable name. > > >

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Eric Paris
On Mon, 2014-10-20 at 16:25 -0400, Steve Grubb wrote: > On Thursday, October 02, 2014 11:06:51 PM Richard Guy Briggs wrote: > > This is a part of Peter Moody, my and Eric Paris' work to implement > > audit by executable name. > > Does this patch set define an AUDIT_VERSION_SOMETHING and then set

Re: [PATCH V5 0/5] audit by executable name

2014-10-20 Thread Steve Grubb
On Thursday, October 02, 2014 11:06:51 PM Richard Guy Briggs wrote: > This is a part of Peter Moody, my and Eric Paris' work to implement > audit by executable name. Does this patch set define an AUDIT_VERSION_SOMETHING and then set AUDIT_VERSION_LATEST to it? If not, I need one to tell if the ke

[PATCH V5 0/5] audit by executable name

2014-10-02 Thread Richard Guy Briggs
This is a part of Peter Moody, my and Eric Paris' work to implement audit by executable name. Please see the accompanying userspace patch: https://www.redhat.com/archives/linux-audit/2014-May/msg00019.html The userspace interface is not expected to change appreciably unless something impor